foreman: XSS in hidden parameter value switcher

Cross-site scripting XSS vulnerability in Foreman 1.7.0 and after...